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FOREWORD 



THE GLOBAL BUSINESS OF ORGANISED CRIME 


The Australian Criminal Intelligence Commission (ACIC) commenced operations on 1 July 
2016 bringing together the Australian Crime Commission and CrimTrac as one agency, along 
with the research capability of the Australian Institute of Criminology (AIC). 

This publicaron is the first Organised Crime in Australia (OCA) report produced by the 
newly formed ACIC and provides an update to information published in the Australian Crime 
Commission's Organised Crime in Australia 2015 report. 

The Organised Crime in Australia 2017 (OCA 2017) report provides a snapshot of serious 
and organised crime in Australia, exploring existing and emerging organised crime threats 
affecting the Australian community and national interests. Information presented in the 
OCA 2017 is intended to inform readers of the current trends in Australian crime markets 
and to provide information on how the Australian Government is addressing the threat of 
serious and organised crime to Australia. 

Serious and organised crime touches the lives of Australians in unprecedented ways. 

It is destructive, pervasive and complex. In December 2015, the then Australian Crime 
Commission estimated the cost of serious and organised crime in Australia to be at least 
A$36 billion a year. That equates to A$l,561 out of every individual Australian's pocket and 
adds 6.3 per cent to the average cost of living. 

Alongside the financial cost of serious and organised crime are the devastating health and 
social impacts of illicit drug use. There are also the highly visible flow-on effects of serious and 
organised crime activity on the Australian community, typically in the form of volume crime. 

Serious and organised crimináis control illicit markets that terrorists may seek to access to 
enable acts of terrorism. Links have been observed between serious and organised crime 
and persons of interest to counter-terrorism investigations. 

Organised crime in Australia is proficient and enduring. It is transnational in nature, 
technology enabled and ¡ncreasingly functions as a business: employing professionals; 
outsourcing key activities such as money laundering; diversifying into múltiple criminal 
markets; and developing strong, consistent revenue streams through involvement in 
comparatively low-risk activities. 
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Geographic boundaries no longer contain criminal networks. Increasing access to and 
uptake of the internet provides serious and organised crime groups with the ability to target 
thousands of Australians simultaneously from anywhere in the world. Transnational organised 
crime groups continué to be attracted to and target Australia's lucrative illicit drug market. 

As the reach of organised crimináis expands to exploit markets offshore, law enforcement 
has also become more connected through the development of information-sharing 
platforms and enhanced relationships with overseas partner agencies, to effect timely 
information sharing on key threats and engage in joint disruptive activity. 

Collaboration is occurring on national and international levels between industry, governments 
and law enforcement to ensure informed, considered and innovative responses to the 
threat of organised crime. With ACIC intelligence indicating up to 70 per cent of Australia's 
serious and organised crime threats are based offshore or have strong offshore links, and as 
visibility of criminal activities becomes increasingly obscured through new technologies and 
sophisticated methods, it is clear that a connected, informed and collaborative response to 
the threat is required. 



Acting Chief Executive Officer 
Australian Criminal Intelligence Commission 
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SNAPSHOT 


GLOBAL BUSINESS OF ORGANISED CRIME 



Transnational 

■ exploits lucrative markets from 
locations offshore 



Technology enabled 

■ provides access to victims all over 
the world 


Operates as a business 



employs the Services of professionals 
to advise on complex methods and 
techniques 

outsources key activities such as 
money laundering to dedicated 

Service providers and professional 
organisations 

diversifies into múltiple criminal 
markets to permit responsiveness to 
shifts in supply and demand 

ensures a strong, consistent revenue 
stream through involvement in 
comparatively low risk markets to 
finance the higher risk, more lucrative 
aspect of their business 

proficient and enduring 


HIGHLIGHTS 



Key enablers 

■ technology and digital infrastructure 

- encrypted communication 

- highly networked and connected 
crimináis 


■ professional facilitators 

■ money laundering organisations 

- professional money laundering 
organisations and offshore Service 
providers 


K Market shifts 

■ predicted rise in cocaine supply 

■ use of opioids and fentanyl at concerning 
levels 



Key threats 

■ methylamphetamine is an illicit drug of 
disproportionate harm in Australia 


■ exploitation of financial sector poses a 
significant risk to the integrity of the 
Australian economy 

- cyber enabled 



manipulation of Australia's visa and 
migration System presents an ongoing 
threat to Australia's borders 

growing internet availability and usage 
increases organised crime access to 

vulnerable individuáis 


RESPONSES 

Informed 

■ Organised Crime in Australia report 

■ National Organised Crime Response Plan 2015-18 

■ National Wastewater Drug Monitorlng Program 

■ The National Ice Taskforce and National Ice Action 
Strategy 2015 


Collaborative 

■ Task forces and joint agency groups 

■ Five Eyes Law Enforcement Group 

Connected 

■ National Criminal Intelligence System 

■ National Policing Systems 
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EXECUTIVE SUMMARY 

Transnational serious organised criminal groups have had a significant impact on crime 
markets in Australia in the past two years, with technology and digital infrastructure 
presenting as key enablers across múltiple crime types. Australia's borders face ongoing 
challenges from transnational organised crime and the movement of illicit goods, money 
and people. However, for some crime types, technology has dissolved borders that 
previously protected victims from offshore offenders. 

The use of technology and digital infrastructure by serious and organised crime is 
considered a key determinant of significant changes in the criminal landscape into the 
future. The impact of the availability of technology can already be seen in múltiple crime 
types, with greater instances of technology-enabled fraud in the areas of online banking, 
trade, superannuation and identity crime. The ability to target individuáis remotely from 
any location in the world is attractive to serious and organised crime groups, who actively 
use technology to target the financial sector, to undertake online trading of illicit goods via 
the darknet, and to commit acts of child sexual exploitation (CSE) through online grooming 
and distribution of child exploitation material (CEM). The growing availability and usage of 
the internet has also ¡ncreased access by organised crime to vulnerable individuáis. 

The ready availability of technology to reduce law enforcement visibility of serious and 
organised crime groups' activities has had an impact on how law enforcement agencies 
undertake their work. The rapid uptake of new capabilities such as encrypted communication 
devices and applications will continué to challenge law enforcement in coming years. 

Professional facilitators have emerged as a fundamental issue for law enforcement and 
regulatory agencies. In an increasingly complex global environment, crimináis engage a 
range of professional facilitators to commit crimes, avoid detection and conceal assets. 

Money laundering continúes to be a significant enabler of criminal activity, with recent joint 
targeting of professional money laundering organisations by domestic and international 
partner agencies revealing the significance and international dimensión of this threat. 

Over the past few years, the speed with which global trends have been replicated in 
Australia has increased. International law enforcement partners predict that a significant 
increase in coca cultivation in Colombia will result in cocaine supply to the United States 
¡ncreasing to levels not seen in the past 10 years. Significant detections of cocaine in 
Australia in late 2016 and early 2017 may suggest an expansión of this market in Australia. 
Agencies in the United States and Cañada report concerns with opioid abuse and a rise in 
the use of fentanyl. Results of the ACIC's National Wastewater Drug Monitoring Program 
(NWDMP) in 2017 indícate oxycodone and fentanyl consumption (licit and illicit) across all 
jurisdictions is at concerning levels. 

Methylamphetamine 1 use is of ongoing concern and is considered by the ACIC as an 
illicit drug of disproportionate harm in Australia. The results of the NWDMP identify 
methylamphetamine as the highest-consumed illicit drug tested across all regions in 
Australia, with Australia ranking second for the consumption of methylamphetamine when 
compared with 17 European countries with comparable reported data. 


1 The word 'methylamphetamine' ¡s used in this report to describe the various forms of methylamphetamine including 
crystal methylamphetamine (commonly referred to as 'ice') and methamphetamine, unless specifically referenced. 
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The expansión of serious and organised crime activity in the financial sector poses a significant 
risk to the integrity of the Australian economy, financial markets, regulatory frameworks and 
revenue collection. Finally, manipulation of Australia's visa and migration system presents 
ongoing challenges to the security of the border, as transnational organised crime seeks to 
enable the movement of people, money and illicit goods in support of criminal enterprise. 

HOW WE ARE RESPONDING 

The National Organised Crime Response Plan 2015-2018 articulates Australia's national 
response to the threat posed by serious and organised crime. Current responses to serious 
and organised crime recognise the growing international dimensión of the threat and the 
need for strong partnerships with domestic and international agencies. Initiatives require 
a coordinated national and international approach that harnesses collective resources, 
capabilities, expertise and knowledge. 

The following provides a summary of some of the key initiatives from the National 
Organised Crime Response Plan 2015-2018 and other recent strategies aimed at reducing 
the threat from serious and organised crime and its impact on the Australian community. 

INFORMED 

■ National Wastewater Drug Monitoring Program—funding allocated in 2016 to implement 
the NWDMP. The program will analyse wastewater over a three-year period to provide 

a measure of the demand for a range of licit and illicit drugs. Results of the NWDMP will 
inform governments and effectively direct resources to priority areas. 

■ National Ice Taskforce—established by the Australian Government in April 2015. Taskforce 
findings informed the development of the National IceAction Strategy 2015, endorsed by 
the Council of Australian Governments in December 2015. The strategy aims to reduce the 
prevalence of ice use and resulting harms in the Australian community. 

C0LLAB0RATIVE 

Task forcé and joint agency arrangements 

■ initiatives of the Serious and Organised Crime Coordination Committee including ACIC 
Task Forcé Morpheus 2 focusing on activities of outlaw motorcycle gangs (OMCGs) and 
Operation Athena targeting the ¡Ilegal firearms market 

■ intelligence hubs including the Australian Gangs Intelligence Coordination Centre 
(AGICC) 3 and the National Criminal Intelligence Fusión Capability 

■ Task Forcé Vestigo 4 created to enhance international engagement and collaboration in 
responding to the threat posed to Australia by high-risk serious and organised crime 
entities either based overseas or with direct links to criminal entities based overseas 

■ international collaboration through involvement in the Five Eyes Law Enforcement 
Group (FELEG) 

■ Serious Financial Crime Taskforce (SFCT), specifically targeting fraud, money laundering 
and defrauding the Commonwealth 


2 Morpheus is a joint law enforcement initiative across Commonwealth and national law enforcement, with a focus on 
outlaw motorcycle gangs (OMCGs) that pose a high risk to the Australian community. 

3 The AGICC provides a dedicated intelligence capability for the AFP-led National Anti-Gangs Squad (NAGS). 

4 Established November 2016. 
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■ Australian Transaction Reports and Analysis Centre (AUSTRAC) memorándums of 
understanding with the China Anti-Money Laundering Monitoring and Analysis Centre 
and the Jordanian Anti Money Laundering and Counter Terrorist Financing Unit to 
facilítate the exchange of financial intelligence 

■ joint government and industry initiatives: 

- Fintel Alliance 5 

- Australian Financial Crimes Exchange (AFCX) 6 

■ initiatives to reduce the threat of cybercrime including: 

- National Cyber Security Strategy 

- Australian Cyber Security Centre 

- Participaron in the International Global Operations Targeting Unit 

■ Increased funding for Australian Border Forcé Tobacco Strike Team to combat criminal 
syndicates attempting to smuggle illicit tobáceo into Australia 

■ Operation Sovereign Borders, a border security operation aimed at combating maritime 
people smuggling and protecting Australia's borders 

■ Joint Anti Child Exploitation Teams working to identify Online sexual predators 

- Carly's Law 7 was recently passed by federal parliament to enhance the capability of 
law enforcement to respond to crimináis who misrepresent their age with the intent to 
cause harm, engage in or procure sexual activity with a minor. 

CONNECTED 

Advances in technology are contributing to law enforcement's ability to discover, 
understand and respond to serious organised crime. Initiatives inelude: 

■ Australia's biometric Face Verificaron Service 8 

■ ACIC's National Criminal Intelligence System (NCIS) pilot program 

■ technological developments—including DNA analysis, spatial monitoring software, 
thermal imagery, and GPS-enabled cameras and smartphones—being used in new ways 
to detect criminal activities 

■ improved monitoring of the scope of the Australian illicit firearm market including: 

- Australian Firearm Information NetWork 9 

- National Firearm Identification Database 10 . 

5 A world-first public-private partnership established by Australian Transaction Reports and Analysis Centre (AUSTRAC) and 
launched in March 2017. 

6 The Australian Financial Crimes Exchange (AFCX) brings together business, government, law enforcement agencies and 
industry groups to combat the threat from financial and cybercrime by providing leading security capabilities, technology 
and intelligence in one central platform 

7 Criminal Code Amendment (Protecting Minors Online) Act 201 7. 

8 In November 2016, the first phase of Australia's biometric Face Verification Service became operational, providing the 
Department of Foreign Affairs and Trade and the Australian Federal Pólice access to citizenship images held by the 
Department of Immigration and Border Protection. 

9 An ACIC-hosted viewing platform for jurisdictional firearm data, both historical and contemporary, on licit and illicit 
firearms located by law enforcement. 

10 Online tool used byjurisdictions to standardise terminology according to Industry speclfications of firearms and their variants. 
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KEY ENABLERS 

THEME SUMMARY 

The ACIC has ¡dentified six key enablers for serious and organised crime: 

■ Money laundering 

■ Technology 

■ Professional facilitators 

■ Identity crime 

■ Public sector corruption 

■ Violence and intimidaron 

Key enablers have a unique role in facilitating serious and organised crime. Activities such 
as money laundering and identity crime contribute to the effectiveness of other types of 
organised crime. While not all of the above enablers are present in every illicit market, two 
or more enablers may be used concurrently within the same criminal enterprise. 

Enablers are integral to the business of serious and organised crime groups. Law 
enforcement, regulatory, legislative or policy actions against enabling activities have the 
potential to disrupt criminal networks across múltiple illicit markets or to severely hinder 
their activities. For example, increased law enforcement and regulatory capability to identify 
and prosecute professional facilitators would have a significant impact on all criminal groups 
relying on the expert advice and knowledge provided by such facilitators to perpétrate 
or conceal criminal activity. Similarly, reduced ability of crime groups to realise their illicit 
proceeds or conceal their illicit wealth through targeting of money laundering would be 
likely to affect future illicit activity by serious and organised crime groups. 

MONEY LAUNDERING 

Money laundering remains a fundamental enabler of profit-motivated crime, and ¡s a 
significant, potentially lucrative criminal enterprise in itself. The primary goals of money 
laundering are to give illicit money the appearance of legitimacy and, through the use of 
complex methods, to move illicit funds without detection. Illicit funds, laundered for the 
appearance of legitimacy, are likely to be ¡nvested in businesses or schemes that provide 
the greatest chance of concealing the origins of the money, rather than on the basis of 
predicted returns. 

Money laundering is an extremely diverse activity carried out at all levels of sophistication, 
and it plays an ¡mportant role in serious and organised crime. The banking system 
and money transfer Services are common methods used to launder funds, and money 
launderers continually exploit vulnerabilities in the financial system to circumvent the 
counter-measures designed to detect them. Bulk cash smuggling also remains a viable and 
active means to launder the proceeds of crime. 
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The ACIC's Eligo National Task Forcé 11 (Eligo) ¡dentified the following four key features of 
money laundering activity in Australia, which can appear separately or jointly: 

■ intermmgling legitímate and ¡Ilegitímate financial activities through cash-intensive 
businesses or front companies 

■ engaging professional expertise/facilitators 

■ engaging specialist money laundering organisations to provide specific money laundering 
Services to domestic and international crime groups 

■ 'internationalisation' of the Australian crime environment—international money 
laundering components for Australian crime groups are common. 


CASE STUDY: DISRUPTION OF INTERNATIONAL MONEY 
LAUNDERING SYNDICATE 

In January 2017, following a lengthy joint investigation, the key figure in an international 
money laundering syndicate was arrested in Sydney. The foreign national was charged with 
knowingly directing the activities of a criminal group. Pólice allege the woman coordinated 
the group's activities from Vietnam, recruited people to launder money, and directed them 
on how to acquire, deposit and exchange the funds through financial institutions. 


Joint task forcé activity has provided Australian law enforcement with significant ¡nsights 
into the operation of transnational money laundering syndicates and their connections 
to other serious and organised crime groups. Investigations have strengthened law 
enforcement's understanding of the range and extent of methods and channels used to 
launder funds. These include the use of the banking sector, alternative money remitters, 
informal valué transfer Systems, casinos, trade-based money laundering, Online wagering 
platforms, high-value commodity trading, complex domestic and international business 
structures, securities markets, virtual currencies and professional facilitators. Money 
laundering continúes to be a focus of law enforcement with work being undertaken across 
múltiple government agencies and across national and international jurisdictions. 

Money laundering remains a key risk to Australia and is the common element in almost all 
serious and organised crime. Money laundering enables crimináis to hide and accumulate 
wealth, avoid prosecution, evade taxes, ¡ncrease profits through re-investment, and fund 
further criminal activity. Money laundering activities also have the potential to undermine 
the stability of financial institutions and Systems, discourage foreign investment and alter 
international capital flows. 


11 Eligo commenced in December 2012 under the then ACC to tackle the high-risk alternative remittance sector and 

operators of other informal valué transfer Systems impacting on Australia. Eligo was extended in 2014 under the Eligo 2 
National Task Forcé (Eligo 2) to disrupt high-priority international and domestic money-laundering operators. The task 
forcé comprised members of the ACC, AFP and AUSTRAC, with support from Commonwealth, State and territory partners, 
along with a number of international partners. Eligo 2 ceased on 31 Dec 2016, with work continuing under the Targeting 
Criminal Wealth Determinaron. 
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MONEY LAUNDERING METHODS: MOVEMENT OF FUNDS OVERSEAS 


tflfc AUSTRALIA 


MONEY REMITTERS 


OVERSEAS & 


MONEY LAUNDERING 
ACCOUNTS/ARS 



VICTIM ACCOUNTS 




NO ACTUAL MONEY MOVEMENT 



MONEY LAUNDERING TRADE BASED 

ACCOUNTS/ARS MONEY LAUNDERING 


líBMSSMgÜ 


MARKET PLACE 


VICTIM ACCOUNTS 





<(□ 



<\m\ 


SPORTS BETTING 

Several International organised crime groups are direct owners of online bookmakers. 
Múltiple opportunities exist for domestic and international crimináis to utilise online 
bookmakers to launder proceeds of crime and profit from the corruption of sporting and 
racing events. This ineludes the capacity to bet large amounts of money anonymously 
through offshore bookmakers. 

Bookmakers operating online wagering platforms are increasingly basing their operations 
in jurisdictions where regulation and oversight of gambling activities ranges from minimal 
to completely absent. Online bookmakers offer a vast array of wagering produets on sport 
and racing events to a global customer base, including gamblers in Australia. The capacity of 
Australian regulatory agencies to effectively monitor gambling through domestic licensing and 
regulatory arrangements has been significantly impacted by the shift to the online domain. 


As at 31 December 2016, there were approximately 25.4 million mobile handset 
subscribers and 13.5 million internet subscribers in Australia. This is an increase 
of 4.7 per cent in internet subscribers since the end of December 2015. 
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TECHNOLOGY 

Increasingly, criminal activities are committed with the assistance of technology either via 
the online environment or through advances in technological capabilities, such as secure 
Communications. 12 The online environment enables crime to be committed remotely and 
with relative anonymity—characteristics that are attractive to serious and organised crime 
groups and other motivated individuáis, making the identification and prosecution of 
offenders more difficult. The commercial availability of secure communication platforms 
and surveillance equipment—such as tracking devices—provides serious and organised 
crime groups with the means to conceal their criminal activities from law enforcement. 
Serious and organised crime groups also engage the Services of professional facilitators with 
relevant information and communication technology (ICT) knowledge and skills to assist in 
the commission of technology enabled crimes. 13 


In 2016, the Australian Cybercrime Online Reporting NetWork (ACORN) received 
46,957 reports. The top three crimes reported related to scams and/or fraud (50 
per cent), purchase or sale (20 per cent) and cyberbullying (7.5 per cent), and 
the top three modes of contact used to conduct these crimes were email, social 
networking and website advertising. 


The majority of serious and organised crime activities are enabled, to some extent, by the 
use of technology. Technology is attractive to crimináis as it can provide anonymity, obfuscate 
activities and locations, and increase their global reach by connecting them to potential victims 
and information around the world. Using technology to commit crime is also significantly more 
efficient and less resource ¡ntensive than traditional methods of perpetrating crime. 

Identity crime, where personal identifying information is stolen and sold online, relies 
heavily on technology. Virtual currencies are used by crimináis for money laundering and 
in exchange for illicit goods. Alternative banking Services that are based online are being 
exploited by serious and organised crime to launder illicit funds, evade tax obligations 
and avoid regulatory oversight. Tax fraud has occurred as a result of compromised payroll 
Systems and superannuation platforms have been targeted for fraud and theft. Technology 
is fundamental to the success of card fraud and facilitates the distribution of child 
exploitation material worldwide. 

The two key enabling technologies currently used to facilítate serious and organised crime 
are virtual currencies and encryption. Virtual currencies, such as bitcoin, are increasingly 
being used by serious and organised crime groups as they are a form of currency that can 
be sold anonymously online, without reliance on a central bank or financial institution to 
facilítate transactions. Darknet 14 marketplaces such as Silk Road 3.0 and VaIha11a 


12 Secure Communications inelude but are not limited to communication devices with military grade encryption, remóte 
wipe capabilities, duress passwords and secure cloud-based Services. 

13 The Australian Cybercrime Online Reporting NetWork (ACORN) is a national policing initiative of Commonwealth, State and 
territory governments. It is a national online system that allows the public to securely report instances of cybercrime. It 
also provides advice to help people recognise and avoid common types of cybercrime. 

14 The darknet is a routed allocation of internet protocol address space that is not discoverable by usual means. The term 
can refer to a single prívate network or to the collective portion of internet address space that has been configured in that 
manner. Popular darknets inelude Tor (the onion router), Freenet and I2P. Such networks are decentralised, routing traffic 
through a widespread system of servers, making it difficult to trace Communications. 
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Marketplace are used to facilítate the sale and trafficking of illicit drugs, firearms, precursor 
Chemicals and child exploitation materials. Australia's use of darknet marketplaces ¡s 
expected to grow, given the ¡ncreasing popularity of online trading and the perceived 
anonymity such marketplaces provide. 

High-end encrypted smartphones continué to be preferred by serious and organised crime 
groups to reduce visibility of their activities to law enforcement. Múltiple OMCGs and other 
serious and organised crime groups use encrypted communication devices and software 
applications such as Phantom Secure BlackBerry and Wickr as their primary means of 
communication, due to the content protection features available on these devices and 
applications. 

Increased availability and ongoing advancement of technology will continué to provide 
crimináis with a diverse range of resources to conduct criminal activity and impede law 
enforcement investigations. 



PROFESSIONAL FACILITATORS 

Serious and organised crime groups engage the Services of professional facilitators to 
launder the proceeds of crime, conceal illicit wealth and enhance their criminal activities. 
Professional facilitators are individuáis who possess specialist skills and knowledge and 
who are used, wittingly or unwittingly, to facilítate criminal activities. The most common 
professions exploited by organised crime inelude lawyers, accountants, financial and tax 
advisers, registered migration agents, stockbrokers, real estáte agents and customs brokers. 
Information and Communications technology professionals are also emerging as a key group 
of professional facilitators. 
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As seen with the release of the so called Panama Papers ¡n April 2016, 15 criminal groups may 
employ offshore Service providers to conceal their illicit funds. Service providers facilítate 
the creation of offshore company structures and associated bank accounts, and provide 
administration Services, nominee directors or shareholders. These providers and the activities 
they undertake can be legal; however, their Services can also enable crimináis to conceal the 
beneficial ownership of assets and the transfer of illicit valué between jurisdictions. 

Professional facilitators possess detailed knowledge of often complex areas of expertise, 
¡mproving a criminal group's resilience to law enforcement detection and intervention and 
increasing their opportunity for success. The use of professional facilitators often results in 
financial gains for crimináis through tax evasión, money laundering, superannuation fraud, 
and phoenixing activities. 

IDENTITY CRIME 

Identity crime continúes to be one of the most common types of crime committed in 
Australia, and acts as an enabler of significant criminal activities including money 
laundering, financial crimes, drug trafficking and fraud. The true extent of identity crime is 
difficult to quantify due to under-reporting, discrepancies in cross-jurisdictional reporting, 
and ¡nstances where identify theft is undetected. There is a growing trend towards 
the commission of identity crime Online through the production and sale of identity 
documentaron and fraudulent use of personal identifying information. 

Identity crime commonly occurs through: 

■ 'phishing' activities where personal information is elicited over the telephone or internet 
and disclosed to a business-type entity that appears legitímate 

■ hacking online accounts 

■ retrieving personal information available on social media 

■ ¡Ilegal access of personal information stored on business databases. 


The cost of identity crime in Australia is estimated at A$2.2 billion, with 
prevention and response activities costing a further A$390 million. 


The incidence of identity crime continúes to exceed that of other personal and household 
thefts. 2016 AIC survey data indicates approximately 8.5 per cent of respondents had 
experienced misuse of their personal information and 5 per cent of all respondents 
reported a financial loss as a result of this misuse. Data breaches increased by approximately 
5 per cent in 2015-16, with 123 voluntary and mandatory notifications reported. 16 Timely 
disclosure of data breaches is critical, as identity misuse typically occurs within 72 hours 
following the breach. 


15 In April 2016,11.5 million documents were leaked from the Panamanian law firm, Mossack Fonseca, exposing how secretive 
offshore tax regimes can be exploited to hide money and evade tax. See Reverme and taxation fraud for further information. 

16 A voluntary data breach notification scheme allows buslnesses and agencies to self-report possible privacy breaches. 
Mandatory data breach notifications specifically refer to breaches of the My Health Records Act 2012. 
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Identity credentials, whether stolen or fraudulent, command high prices. Australian 
passports reportedly cost up to A$5,200 on the illicit online market; drivers licences and 
Medicare cards—the most frequently used credentials in identity crime—can be purchased 
for A$400 and A$250 respectively. 

Compromise of one type of identity credential can often enable further compromise of other 
credentials. For example, unauthorised mobile phone porting—where mobile numbers are 
transferred to another carrier without the owner's consent—is likely to involve an earlier 
compromise of an identity credential such as a drivers licence. 

The financial impact of identity misuse on the individual varíes; however, the process 
of restoring identity can be both time-consuming and complex. The minor financial loss 
contributes to under-reporting of incidents: victims commonly report identity misuse to 
financial institutions, for reimbursement purposes, but not to law enforcement. Collaborative 
work between government, business and community sectors will help mitígate the risk of 
identity crime. Increasing uptake of the Document Verification Service, 17 particularly in the 
prívate sector, and use of biometric identification will strengthen identity protection. 

The Document Verification Service uses name-based checks to help prevent the use of 
fictitious identities. It is not designed to detect instances where crimináis steal information 
used on legitimately issued evidence-of-identity documents and substitute their own photos. 
To address this risk, the Australian Government is implementing the Face Verification Service, 
which uses photos on evidence-of-identity documents to help verify a person's identity. 

It is expected the threat of identity crime will continué to evolve, particularly as the amount 
of personal information posted online through social, business and consumer platforms 
continúes to grow. 

PUBLIC SECTOR C0RRUPTI0N 

Public sector corruption is the misuse of public power or position for personal and/or 
third-party gain or advantage. Exploitation of the public sector by serious and organised 
crime weakens the instruments of government and strengthens criminal networks, 
undermining public confidence in government and public office. There is currently limited 
evidence of serious and organised crime involvement in public sector corruption in 
Australia. Areas of the public sector considered most at risk of corruption by serious and 
organised crime inelude procurement across all levels of government, frontline agencies, 
and new agencies without established anti-corruption practices. 

While Australia is viewed as one of the least corrupt countries, the Transparency 
International Corruption Perceptions Index has rated Australia 13th in 2016, after rating 
Australia 7th in 2012. Various reasons for the decline in Australia's perception ranking 
have been cited, including a number of well-publicised instances of corruption in sport as 
well as publicity generated by several recent anti-corruption ageney and royal commission 
investigations into criminality and workplace misconduct. 


17 The Document Verification Service is one of the key initiatives of the Council of Australian Governments' National Identity 
Security Strategy. It is a national online system that allows organisations to use information taken from a person's identity 
document, with their consent, and compare this against the corresponding records of the document issuing ageney. 
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VIOLENCE AND INTIMIDATION 

Violence and intimidation continúes to enable serious and organised criminal activity in 
Australia. The majority of violence involving organised crime occurs between criminal 
groups, rather than being directed at members of the general public. Serious and organised 
crimináis will often use violence and intimidation to extort significant financial gain from 
individuáis and their businesses, or to coerce them into facilitating and/or undertaking 
criminal activities on behalf of the organised crime group. Violence may also be used as a 
means to control drug networks and settle disputes with the intention of causing serious 
injury or death. The threat of violence posed by serious and organised crime groups is 
realised across all jurisdictions. For example, in 2016 a series of execution-style shootings 
left eight people dead in New South Wales, including a significant underworld figure who 
was shot múltiple times on a residential Street in Earlwood in Sydney. 

Victims of violence and intimidation at the hands of individuáis associated with serious and 
organised crime groups may be reluctant to report their experiences to pólice or health 
professionals for fear of retribution. Under-reporting creates challenges for determining the 
exact nature and extent of harm caused through the use of violence and intimidation tactics 
by serious and organised crime. 
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ILLICIT COMMODITIES 

DRUG MARKET SUMMARY 

The Australian illicit drug market remains highly lucrative, with growing demand for a wide 
variety of substances. Poly-drug use 18 remains a feature of the market, with some serious 
and organised crime groups capitalising on the demand for múltiple drug types by ¡mporting, 
cultivating, manufacturing and/or trafficking several drug types simultaneously. These 
enterprises may also extend their activities to inelude ¡Ilegal tobáceo imports and firearms. 
Serious and organised crime plays a fundamental role in the manufacture, cultivaron, 
importation and distribution of illicit drugs in Australia. 19 

The Australian illicit drug market is best seen as a component of the global market. The 
internet and darknet have enabled the rapid expansión of the global drug market, with 
users able to access drugs, informaron about availability and purity of new drugs, and 
manufacturing manuals online. This has meant that trends in drug use observed in Europe, 
Cañada and the United States (those markets most similar to the Australian market) are now 
very quickly replicated in Australia. Fentanyl usage has been widely reported as an emerging 
trend overseas and has been recently observed in Australia. Increased cocaine supply and use 
in the United States is predicted and may have flow-on effeets in Australia. 

The National Wastewater Drug Monitoring Program (NWDMP) recently implemented in 
Australia provides a data source additional to traditional collection methods to better 
understand the current picture of drug usage within the Australian community. The findings 
of the NWDMP in combinaron with the assessment of drug markets drawn from the ACIC's 
Illicit Drug Data Report provide an informed picture of drug use in Australia. 

Cannabis remains the most commonly used illicit drug in Australia. However, the ACIC 
assesses that the methylamphetamine market poses the highest level of risk to Australia. 
Since the decline in heroin use in the early 2000s, the Australian drug market has generally 
been poly-drug, stimulant-based. This has been most evident in recent years, with the rising 
use of methylamphetamine, particularly crystal methylamphetamine (ice). China continúes to 
be a major embarkation point for methylamphetamine imported into Australia, with Cañada 
and South-East Asia also noted as key embarkation points. 

METHYLAMPHETAMINE 

Australian urban and rural environments are affected by methylamphetamine use and associated 
harms. Wastewater analysis confirms methylamphetamine as the illicit drug consumed at highest 
levels tested across all regions in Australia. 20 Comparable levels of consumption were identified 
between regional and capital cities in Australia, with the exception of South Australia, where the 
State capital recorded higher levels. Western Australia recorded the highest consumption levels, 
with both regional and capital sites exceedingthe national average. 


18 Poly-drug use refers to the use of two or more illicit drugs in combination to achieve a particular effect. 

19 This report is not intended to provide a comprehensive picture of Australian illicit drug markets. Detailed overviews of each 
of the Australian illicit drug markets can be found ¡n the ACIC's Illicit Drug Data Report. 

20 Wastewater analysis undertaken as part of the NWDMP does not test for cannabis consumption apart from the synthetic 
cannabinoids JWH-073 and JWH-018. 
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The market ¡n Australia has traditionally been supplied by domestically produced 
methylamphetamine; however, ¡n the last few years there has been an increase in importations 
of finished product, to the extent that imported product has now overtaken the amount of 
product from domestic manufacture. The use and distribution of methylamphetamine in 
Australia (particularly crystal methylamphetamine) has grown rapidly in the last seven years. 
Since 2013, crystal methylamphetamine has been the dominant form. 


CASE STUDY: LARGE-SCALEIMPORTATION OF 
METHYLAMPHETAMINE 

In March 2017, a joint operation by the AFP and the Australian Border Forcé (ABF) resulted in the 
seizure of 540 kilograms of methylamphetamine concealed within 396 bottles labelled as protein 
powder. The Street valué of the seizure is estimated at approximately A$324 million. Eight 
people were arrested, with subsequent search warrants executed in Western Sydney locating 
an additional five kilograms of methylamphetamine, small amounts of cocaine and ecstasy, five 
firearms, ammunition and a further A$35,000 in cash. 


Serious and organised crime groups are deeply entrenched in the importaron, manufacture 
and distribution of methylamphetamine in Australia, with two-thirds of targets on the National 
Criminal Target List reportedly involved in the sale and distribution of methylamphetamine and/ 
or its precursors. These figures inelude members of OMCGs as well as domestic and transnational 
serious and organised crime groups. Many groups that previously operated in isolation now work 
collaboratively to access broader distribution networks and ultimately maximise profits. Serious 
and organised crime groups also seek access to legitímate industry to enhance or conceal their 
activities. The transport sector, licensed premises, the security industry and the Chemical industry 
are targets for infiltration and exploitation by participants in the methylamphetamine market. 

PRECURSOR CHEMICALS 

Precursor Chemicals are essential for illicit drug production. Every gram of drug manufactured 
or reconstituted in Australia relies on the diversión of a precursor, pre-precursor, reagent or 
solvent from legitímate distribution channels within Australia, or the ¡Ilegal importation of these 
Products. The strong demand for illicit drugs and the significant profits to be made from the sale 
of precursor Chemicals have made this a profitable enterprise in itself. The most prevalent and 
sought-after precursor Chemicals include those used in the manufacture of: 

■ methylamphetamine—such as ephedrine, pseudoephedrine and phenyl-2-propanone (P2P) 

■ 3,4-methylenedioxyamphetamine (MDA) and 3,4-methylenedioxymethamphetamine 
(MDMA)—such as helional, safrole and 3,4-methylenedioxyphenyl-2-propanone (MDP2P) 

■ gamma-hydroxybutyrate (GHB)—such as gamma-butyrolactone (GBL) and 1,4-butanediol (1,4-BD) 

■ lysergic acid diethylamide (LSD)—such as ergometrine and ergotamine 

■ substances used in the reconstitution of steroids into injectable forms—such as benzyl alcohol 
and benzyl benzoate. 
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The largest proportion of the market ¡s composed of precursors for the manufacture 
of methylamphetamine, which remains the predominant drug produced in clandestine 
laboratories detected nationally. Since 2014-15, there has been an increase observed in 
importations of finished product (methylamphetamine) and a decrease in the number of 
detected importations of precursors. More recently, however, the size and sophistication 
of amphetam¡ne-type stimulant laboratories has increased, as has the size of detected 
precursor importations. This trend may be indicative of a change in precursor importaron 
and diversión methodologies. Residential areas remain the primary location for clandestine 
laboratories in Australia, with the residual contamination arising from illicit drug manufacture 
presenting a serious risk to the community and the environment. Clandestine laboratories 
remain an ongoing threat in rural and regional centres. 

Precursor Chemicals can be diverted from a range of sources, including the legitímate 
Chemical industry, the transportation and logistics industry, medical facilities and 
pharmacies. Serious and organised crime groups have attempted to infíltrate these 
industries. They may also establish compames to give the appearance of legitimacy to 
precursor importations. Serious and organised crime groups are very resilient and adaptable 
to shifts in precursor availability, employing 'cooks' 21 who can create precursors, such as 
ephedrine, in clandestine laboratories or who are able to develop new manufacturing 
methods which do not require access to controlled Chemicals. 

COCAINE 

The majority of the world's cocaine ¡s produced in Perú, Bolivia and Colombia. Cocaine is 
imported into Australia by a diverse range of transnational organised crime groups. 

In comparison to markets in North America and parts of Europe the cocaine market in 
Australia is lucrative but small. In Australia, cocaine use tends to be concentrated in the 
eastern seaboard States, where there appears to be greater availability. The findings of 
the NWDMP confirm cocaine consumption in capital city sites in New South Wales to be 
well above the national averages. Consumption is typically higher in capital city sites, with 
many regional sites showing minimal levels of cocaine consumption. User surveys such as 
the Illicit Drug Reportlng System and the Ecstasy and Related Drugs Reportlng System also 
indícate varying degrees of cocaine availability in all States and territories. 

There were several large detections of cocaine in late 2016, indicating a possible expansión 
of the market. These detections, and another significant seizure in early 2017, all involved 
the use of sea vessels. As outlined in the case study below, the total weight of the seizures 
was 3.3 tonnes. Significantly, the seized cocaine was transported on vessels originating from 
North, South and Central America and China, emphasising the international diversity of the 
cocaine threat to Australia. 


21 'Cook' ¡s a term used to describe a person who manufactures amphetamine-type stimulants. 
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CASE STUDY: ATTEMPTED LARGEIMPORTATIONS OF 
COCAINE ON BOARD SEA VESSELS 

■ In August 2016, a joint operation between the ABF, the AFP, the United States Flomeland 
Security Investigations, the New Zealand Customs Service 

and the Cañada Border Services Agency resulted in the seizure of approximately 
95 kilograms of cocaine from a cruise ship in Sydney. 

■ On 12 December 2016, a commercial vessel was intercepted; approximately 
186 kilograms of cocaine was seized from the vessel. 

■ An international multi-agency operation involving the AFP, the ABF and New South 
Wales Pólice Forcé resulted in the seizure on 25 December 2016 of approximately 
500 kilograms of cocaine in New South Wales, and an earlier seizure in March 2016 of 
more than 600 kilograms of cocaine in Tahiti which was allegedly destined for Australia. 

■ In February 2017, an AFP investigaron supported by the New Zealand Customs Service, 
the Organised Financial Crime Agency of New Zealand, the Fijian Transnational Crime 
Unit, French Polynesian authorities and the ABF resulted in the seizure of more than 
1.4 tonnes of cocaine on board a yacht. 


Between 2013 and 2015, Colombia experienced the two largest single-year coca cultivation 
¡ncreases ever recorded. As a result, it ¡s predicted that in 2017 the United States will very 
likely experience the highest cocaine supply and use levels in a decade. It ¡s possible that 
these high yields may account for the large detection of cocaine in Australia in 2016, and 
that Australia may see a growth in cocaine supply and a corresponding ¡ncrease in the 
domestic market for cocaine in Australia. 


MDMA 

Wastewater analysis indicates MDMA consumption levels are relatively low across the country, 
with minimal differences identified between regional and capital city sites. In recent times, 
however, there has been an ¡ncrease in MDMA production, most notably in the Netherlands, 
Belgium and Germany. This has had a flow-on effect felt across the world, with some large 
importations detected in Australia. Although importation remains the primary source of supply 
to the Australian market, some manufacture does occur domestically. While the number of 
MDMA laboratories detected nationally remains low, there was a sixfold increase in detections, 
from three MDMA laboratories detected in 2013-14 to 18 in 2014-15. 

MDMA is also commonly known as 'ecstasy', although not all drugs sold as ecstasy 
in Australia actually contain MDMA. Forensic analysis of ecstasy tablets, capsules, 
powder and crystals reveáis that some contain a mix of MDMA and other drugs such as 
methylamphetamme, or contain a mix of licit and illicit substances with no MDMA. There 
have also been instances where no illicit substances have been detected. Genuine MDMA 
remains a highly desirable drug for users, and is often incorrectly perceived as a 'safe' 
alternative to other stimulants. There is potential for a large and lucrative market for MDMA 
to re-develop in Australia, driven by a strong user base. 
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CANNABIS 

Cannabis ¡s the most commonly used illicit drug in Australia. Almost all cannabis consumed 
in Australia is cultivated domestically, with the majority of border detections being of 
cannabis seed. Cannabis cultivation occurs in all Australian States and territories, and 
ineludes indoor hydroponic cultivation as well as outdoor 'bush' cultivation. Recent user 
surveys rate cannabis as 'very easy' to obtain, with hydroponic cannabis viewed as having 
high poteney and bush cannabis as having médium poteney. 

Serious and organised crime groups are well established in the Australian cannabis market, 
which is robust and profitable. There is considerable diversity in the size and sophistication 
of cannabis cultivation in Australia, from small-scale cultivation for personal use through 
to large indoor hydroponic or outdoor crops. In many cases, those involved in indoor 
hydroponic cultivation are assisted by professional facilitators in the real estáte ¡ndustry and 
electrical trades. Association with the hydroponics industry provides crimináis with easy 
access to equipment and fertilisers. 

The crop eyele for hydroponic cannabis crops is short, making cannabis a popular choice for 
groups seeking to raise revenue quickly. Serious and organised crime groups are increasingly 
using cannabis cultivation as part of their business model, setting up múltiple crop houses 
simultaneously to generate funds to reinvest into other criminal activities including the 
importaron of methylamphetamine. 

HEROIN 

The majority of the world's illicit opium poppy cultivation occurs in South-East Asia, 
South-West Asia and South America. Afghanistan, in South-West Asia, is the leading 
cultivator and producer of opium globally. Drug profiling data indicates the majority of 
analysed heroin seizures in Australia origínate from South-East Asia, with fluctuating supply 
originating in South-West Asia. Serious and organised crime is entrenched in the market, 
and a range of groups are involved in the importation and distribution of heroin in Australia. 

There are inconsistent indicators of change occurring in the heroin market at present. The 
number and weight of border detections of heroin decreased in 2015-16, but there were 
also several short-term spikes in overdoses in some States throughout 2016. It is unclear 
if these were due to the natural ebb and flow of the market, or to longer-term change. 

It is possible that changes in the market may also be attributable to opioid users moving 
between pharmaceutical opioids and heroin, due to the similar effeets, and to the tendeney 
for users to switch between commodities depending on availability. 

ILLICIT PHARMACEUTICALS 

The illicit pharmaceutical opioid market is ¡nextricably linked to the heroin market because 
of the similarities in the effeets of these substances on the user. Pharmaceuticals commonly 
misused inelude opioid-based pain relief medications, opioid substitution therapies, 
benzodiazepines and codeine. The synthetic opioid fentanyl is an emerging drug of choice 
globally. Fentanyl, carfentanil and other potent illicit pharmaceuticals such as W-18 have 
been detected in Australia and are available on the darknet. The strength of pharmaceutical 
opioids such as fentanyl—estimated to be 80-100 times more potent than morphine— 
presents significant health risks if misused. 
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CASE STUDY: USE OF INTERNATIONAL MAIL STREAM TO 
IMPORT ILLICIT PHARMACEUTICALS 

The Australian Border Forcé have seized more than 50 packages of fentanyl in the past five 
years, the majority of which have been imported into Australia through the international 
mail stream. Importation of the drug W-18 via the international airmail system has also 
been detected in recent years. W-18 is claimed to have been responsible for overdoses 
among users who believed they were taking fentanyl. 


A key source of illicit pharmaceuticals continúes to be diversión from legitímate medical 
use. This causes significant financial cost to the government when drugs diverted are also 
subsidised on the Pharmaceutical Benefits Scheme. 22 Anecdotal evidence suggests the 
use of illicit pharmaceuticals is high in rural and remóte communities, where access to 
illicit drugs may be limited. Recent findings of the NWDMP indícate consumption of both 
fentanyl and oxycodone is higher in most regional sites than in capital city sites. Fentanyl 
use was particularly high in regional sites in New South Wales, South Australia, Queensland 
and Western Australia. Data collection on fentanyl consumption in Adelaide indicates 
consumption has been relatively constant over a four-year period (2013-16), with the 
exception of a spike in 2015. It is unclear whether these results are ¡ndicative of misuse 
of pharmaceuticals in regional areas or reflect prescribing habits of medical professionals. 
Organised crime involvement in fentanyl distribution is currently unknown. 

TRYPTAMINES 

Tryptamines are hallucinogenic substances that act on the central nervous system, distorting 
mood, thought and perception. In Australia, the most commonly used tryptamines remain 
lysergic acid diethylamide (LSD), psilocybin-containing mushrooms ('magic mushrooms') 
and dimethyltryptamine (DMT). Recent years have also seen the emergence of a range of 
hallucinogenic substances that mimic the effect of these substances; these are known as 
new psychoactive substances (NPS) and are discussed in the next section. 

Tryptamine users are active on social media, contributing to forums and websites to share 
experiences and to source substances. Commentary on social media can range from basic 
chatter to detailed instructions on use, dosage and side effects. Tryptamine use has long 
been associated with spiritual and/or religious rituals, and regular users have forums 
dedicated to promoting it. 

LSD is predominantly self-sourced over the internet. Similarly, psilocybin-containing 
mushrooms are generally obtained for personal use or supplied in cióse circles. The internet 
continúes to have a role in both supply and promotion of tryptamine use. 


22 The Pharmaceutical Benefits Scheme is a federally funded government program that subsidises the cost of a broad range 
of medicines. 
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NEW PSYCHOACTIVE SUBSTANCES 

New psychoactive substances 23 are synthetically created substances that have a similar 
Chemical structure to an illicit drug, or mimic its effects. Often referred to as 'legal' 
alternatives 24 to illicit substances, NPS comprise a range of substances, including stimulants, 
hallucinogens, anaesthetics and cannabimimetics, also known as synthetic cannabinoids. 

IIlegal synthetic drugs and cannabinoids have previously been detected for sale as 'legal 
highs' at retail outlets under various product ñames. 

There continúes to be an increasing range of NPS manufactured and distributed 
internationally. At the end of 2015, the United Nations Office on Drugs and Crime reported 
644 different substances in the global market. 

NPS have been available in the Australian market since the mid-2000s and have increased 
in availability and popularity in recent years. The NPS market ¡s highly reactive, appearing 
to ¡ncrease and decrease in response to changes in other drug markets. The darknet is 
used extensively as a médium for sales of NPS, as well as for information sharing and social 
commentary on these substances. 

Survey data indicates the use of synthetic cannabinoids dropped from 16 per cent in 2013 
to 4 per cent in 2016. It is believed the decline in use of synthetic cannabinoids is related 
to users' negative reports about both the high and the comedown following use of the 
substances. 

Although detection methods for measuring the cannabinoids JWH-018 and JWH-073 were 
included in the NWDMP, neither compound was detected in any of the analysed samples. 
Detections of methylone and mephedrone were measured through the parent compound; 
while the substances were detected at a series of sites across the country, the level of 
consumption was considered low. Historical data on methylone and mephedrone detections 
in Adelaide indicates consumption of both these substances has steadily declined over the last 
six years. These findings corrobórate the assessment that the NPS market—composed of some 
potentially lethal substances—is very small relative to the more traditional drug markets. 

ANAESTHETICS 

The two anaesthetics most commonly diverted for illicit use in Australia are ketamine 
hydrochloride (ketamine) and gamma-hydroxybutyrate (GHB), also known as 'fantasy', 
'juice', 'lucy' or 'G'. Both substances have well-established, albeit small, niche markets, 
primarily consisting of users based in capital cities along the eastern seaboard.There are 
indications drug users seeking alternatives to MDMA may turn to anaesthetics during 
periods of reduced MDMA availability. 


23 NPS are also known as novel substances, novel psychotropic substances, emerging psychoactive substances, analogues, 
mimetics, legal highs, new synthetics, synthetics, herbal highs or designer drugs. The term does not necessarily referto a 
new invention, as many NPS may have been synthesised years or decades ago, but rather that they have recently emerged 
on the market. 

24 Use of the term 'legal' may not reflect the true legal status of these substances under Australian law. 
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Legitimately used as a medical or veterinary anaesthetic, ketamine ¡s also used illicitly for its 
sedative and hallucinogenic effect. It is frequently detected as an adulterant in tablets sold 
as ecstasy. Serious and organised crime has not been identified as playing a key role in the 
ketamine market in Australia. Ketamine tends to be diverted or imported into the Australian 
illicit market in relatively small quantities, reflecting personal use or small-scale distribution. 

GHB is a powerful central nervous system depressant readily manufactured from its precursors, 
gamma-butyrolactone (GBL) and 1,4-butanediol (1,4-BD). GBLand 1,4-BD have legitímate 
uses as solvents in industrial Chemical processes, including in the production of polymers. 

If ingested, both GBL and 1,4-BD metabolise into GHB in the body. The effects of GHB vary 
greatly depending on the dose, and even a very small increase in dose can lead to overdose. 

There are elements of organised crime present in the Australian GHB, GBL and 1,4-BD 
markets, with some transnational organised crime groups implicated in importations into 
Australia and other groups being ¡nvolved in domestic manufacture and trafficking. The 
level of sophistication required to opérate in this market is quite low, given the ease with 
which GBL and 1,4-BD can be diverted from legitímate supplies. 

PERFORMANCE AND IMAGE ENHANCING DRUGS 

The performance and image enhancing drugs (PIEDs) market in Australia is growing rapidly, 
consisting of users from an increasingly diverse demographic using a wide range of substances. 
One of the key drivers of the market is a strong youth culture that is focused on achieving a 
muscular and athletic physical appearance, particularly prevalent among young men. 

The use of PIEDs has also been associated with violent behaviour, particularly among young 
men using PIEDs in conjunction with alcohol and/or other illicit drugs. This has ¡nfluenced 
legislative changes in several jurisdictions, resulting in increased penalties for the unlawful 
possession of steroids. 

Serious and organised crime groups are involved in the importaron, manufacture and 
distribution of PIEDs in Australia. However, individuáis also import PIEDs for personal 
use or for supply to friends and acquaintances. A significant number of PIEDs have been 
detected in the mail. There have been múltiple detections of large commercial clandestine 
PIEDs laboratories in recent years. These laboratories often involve the reconstitution of 
powdered steroids into an ¡njectable form. 

ILLICIT TOBACCO 

Serious and organised crime remains entrenched in the ¡Ilegal tobáceo market, both through 
the ¡Ilegal importation of tobáceo produets and through the local production of ¡Ilegal 
tobáceo. Source countries for illicit tobáceo include the United Arab Emirates, Malaysia, 
Indonesia and Singapore. 
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Between October 2015 and December 2016, the ABF Tobacco Strike Team seized more 
than 22 tonnes of tobáceo and 52 million cigarettes. Theses figures inelude the discovery 
of 18 million sticks of 'Napoli' brand cigarettes in a container arriving from China on 
3 December 2016. The Street valué of this discovery is estimated at more than A$5 million 
with the total amount of duty evaded estimated at A$ll million. A further five million 
¡Ilegal cigarettes and one tonne of loose leaf tobáceo were detected by ABF officials at the 
International Mail Centre ¡n January 2017. 

The local production of ¡Ilegal tobáceo is an enduring problem. The Australian Taxation 
Office (ATO), in collaboration with law enforcement partners, continúes to make significant 
seizures across several jurisdictions. In March 2017, an ¡Ilegal tobáceo crop worth more than 
A$ll million was discovered in New South Wales. This seizure followed similar searches 
in Victoria and New South Wales in late 2016 and early 2017 netting ¡Ilegal tobáceo with a 
potential excise valué greater than A$10 million. This highlights the significant profits to be 
made from the ¡Ilegal tobáceo market ¡n Australia. 

ILLICIT FIREARMS 

The use and distribution of ¡Ilegal firearms poses a serious threat and safety concern to the 
Australian community. Firearms are used by a wide range of crimináis to protect their interests, 
for intimidation through the threat of harm, or to commit acts of physical violence. Reporting 
indicates several serious and organised crime groups are involved in trafficking firearms. 

No single group dominates the sale and supply of illicit firearms to the Australian market. 

The extent of the ¡Ilegal firearm market ¡n Australia remains difficult to estímate. The 
ACIC conservatively estimates there are approximately 260,000 firearms in the domestic 
illicit market, including 250,000 long-arms and 10,000 handguns. Historically, diversión 
of firearms to the illicit market was primarily through the grey market. 25 Recent trends in 
diversión methods inelude theft, domestic manufacture, and ¡Ilegal importaron. 

The ACIC Firearm Trace Program (FTP) data for 2015-2016 revealed theft as the primary 
diversión method, accounting for 8.5 per cent of firearms traced. 26 Firearm theft is often 
not contemporaneous with detection and could have occurred years before the firearm was 
actually located. Regional or isolated locations are particularly vulnerable to firearm theft, 
such as hobby farms characterised by long periods of absence or safe storage areas located 
away from main dwellings. The sophisticated and organised theft of firearms from licensed 
dealers is rare, but can greatly increase the number of ¡Ilegal firearms in the illicit market, as 
¡ndicated by the theft of 130 handguns from a well-established firearms dealer in Western 
Australia in March 2017. 


25 The grey market consists of illegally held long-arms that were not registered or surrendered under the 1996 National 
Firearms Agreement. 

26 The ACIC Firearm Trace Program provides a national picture of illicit firearms located by law enforcement agencies. Slnce 
submissions of trace requests by law enforcement to the FTP are voluntary, FTP statistics do not reflect the total number 
of Illicit firearms located in Australia. 
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Domestic manufacture of illicit firearms, including single-shot pen guns and handguns, key 
ring guns and submachine guns, is an enduring issue. As technology develops, increased 
attempts to produce reliable illicit firearms have been observed. The Online environment 
provides a source of firearm manufacturing plans, CNC 27 and 3D software, and techniques 
shared by users intent on manufacturing illicit firearms. The reliability and cost-effectiveness 
of 3D manufactured firearms fails to match those of factory-produced firearms. 

The scale of importaron of ¡Ilegal firearms and components into Australia is difficult to 
define. FTP data for 2004-2016 indicates approximately 7 per cent of all diverted handguns 
were illegally imported. In 2015-2016, one per cent of all firearms traced by the FTP related 
to ¡Ilegal importations. 

Australian border detections of undeclared firearms, parts and accessories have remained 
stable over the last three years. The majority of undeclared firearms imports are attributed 
to opportunistic individual importers rather than serious and organised crime groups. 
Importation occurs primarily through the international mail stream, with post parcel lockers 
providing a further level of anonymity. Members of a New South Wales syndicate were 
recently convicted of importing over 130 semiautomatic handguns and firearm parts 
into Australia through the mail stream in 2012, and the majority of these handguns are yet 
to be recovered by law enforcement. Encrypted websites within the darknet that provide 
online platforms for the purchase of illicit commodities including firearms are likely to 
continué to be exploited. 


27 Computer Numerical Control. 
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ILLICIT FIREARMS IN AUSTRALIA 



While Australia has some of the strongest firearm 
Controls in the world, illicit firearms remain a desirable 
commodity and enabler for criminal activity. 


V 


There are more than 

250,000 long-arms 



and 10,000 handguns 
in the illicit market. 



An increasing number of organised 
crime groups, including outlaw 
motorcycle gangs, are trafficking 
illicit firearms. 



One ¡Ilegal firearm 
in our communlty 

¡s one too many. 

Chris Dawson, former ACIC CEO 



Firearms enable organised 
crime groups to be more 
lethal in their activities. 


2004-2016 ACICreceived 



6,874 

requests for 
domestic 
firearm traces. 



ACIC holds more than 

1.8 million 


There are more than 

2.89 million 

legally registered firearms 

in Australia and approximately 

816,000 

firearm licences. 



historical records of firearms transactions. 


26 


















Australian Criminal Intelligence Commission 

Organised Crime in Australia 2017 


SERIOUS FINANCIAL CRIME 

THEME SUMMARY 

The ACIC has ¡dentified five key elements of financial crime: 

■ cybercrime 

■ investment and financial market fraud 

■ revenue and taxation fraud 

■ superannuation fraud 

■ card fraud. 

Financial crimes are diverse in nature and scale, and in the level of harm they cause. The modern 
globalised economy and advances in technology create new opportunities for organised crime 
to exploit vulnerabilities for illicit profit. The expansión of serious and organised crime into 
the financial sector poses a significant risk to the integrity of the Australian economy, financial 
markets, regulatory frameworks and revenue collection. This risk is particularly salient in the 
current economic environment, where damage to financial markets, government revenue base 
and the savings of prívate individuáis can have far-reaching implications. 

Conservative estimates put the cost of organised fraud 28 to the Australian economy at 
A$6.3 billion between 2013 and 2014—including revenue and tax evasión, superannuation 
fraud, card and financial transaction fraud. The intermingling of licit and illicit financial 
transactions makes it difficult to fully assess the extent of financial crime in Australia. The 
complexity and potential scale of financial crime poses an ongoing challenge not only to law 
enforcement but also to regulators. 

CYBERCRIME 

Cybercrime against individuáis, businesses and governments can be conducted from 
anywhere in the world. The threat to Australia from cybercrime is transnational in nature 
with the majority of cybercrime affecting Australia originating from Russia and Eastern 
Europe. The primary threat is from temporary networks of people who collaborate but may 
live in geographically diverse locations. This means that cybercrime activities are inherently 
difficult to investígate. 

Cybercrime is defined 29 as: 

crimes where computers or other information Communications technologies are an 
integral part of an offence, such as online fraud, identity crime and the distribution of 
child exploitation material. 


28 The cost of government support for victims, based on the approximate size of the illicit activity and the percentage of 
serious and organised crime ¡nvolvement. 

29 Australian Cyber Security Centre 2015, ACSC2015 Threat Report, ACSC, Canberra, p.8. 
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Cybercrime is a low-risk, high-return criminal enterprise with potentially lucrative 
financial gains. Australia's high levels of technology use and relative wealth ensure the 
persistence of the cybercrime threat in Australia. The principal forms of serious and 
organised cybercrime affecting Australia involve ransomware, credential-harvesting 
malware, and distributed denial of Service (DDoS) extortion. Computers and devices 
of prívate individuáis and commercial entities as well as government Systems are all at 
risk from cybercrime. 

RANSOMWARE 

Ransomware is a form of malware that stops a victim from using their Computer, or files, until 
a sum of money is paid to a cybercrime actor. It targets a victim's Computer via malicious 
emails and websites. Once ¡nstalled, ransomware encrypts the victim's files, and then directs 
the victim towards a webpage with instructions on how to pay a ransom for their data to be 
decrypted. Cybercriminals have used ransomware to demand payments from A$500 to A$3,000 
(in bitcoin), with some businesses subjected to targeted attacks requesting tens of thousands 
of dollars. In 2016, the ransomware Cryptolocker was discovered on the Computer system of an 
Australian government agency after an employee clicked on an Australia Post-themed email. 
Cryptolocker re-imaged the staff member's workstation, resulting in thousands of files stored 
on an associated government server being encrypted by the ransomware. 

The most effective ransomware campaigns in Australia use the branding of trusted and well- 
known Australian corporations as part of their social engineering techniques. 

Australian government organisations have also been targets of credential-harvesting emails. 
Such emails direct users to access a document via a shared drive that subsequently requests 
credentials be entered in order to access the document. Once an email account has been 
compromised, the contacts within the account are then sent malicious emails appearing to 
be from the legitímate and trusted source. 


CASE STUDY: 0NG0ING CYBERCRIME AGAINST FINANCIAL 
INSTITUTIONS 

Malware continúes to be used by cybercriminals to attack commercial and prívate enterprise. 
The Gozi Trojan, first discovered in 2007, is one of the longest-operating banking Trojans. 

Despite three of its developers being arrested by the United States Federal Bureau of 
Investigaron in 2013, Gozi and its various iterations continué to be used by múltiple 
cybercriminal groups, posing a persistent threat to the financial sector. In 2016, Gozi was 
identified as active in Australia, Cañada, Italy, Japan and Spain, amongst other nations. 

In February 2016, cybercriminals fraudulently diverted US$851 million from the Bangladesh 
Bank. The cybercriminals infected the Bangladesh Bank's SWIFT payment system with 
malware that allowed them to deactivate system integrity checks, alter payment details, 
and suppress notification of the altered payments. While the majority of the stolen funds 
were recovered, US$81 million remains outstanding. 
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The successful theft of US$81 million highlights the significant financial rewards that can be 
obtained by directly targeting bank Systems rather than bank customers. This has resulted ¡n 
several cybercrime groups taking an increased interest ¡n finding and exploiting vulnerable 
SWIFT Systems. While less-developed countries have been attacked ¡nltially, Australia is also 
a potential target. 


CREDENTIAL-HARVESTING MALWARE 

Mirai is an example of malware that is comparatively unsophisticated; the source code is 
readily available for use by actors at the lowest levels of sophistication. Mirai malware turns 
Internet of Things 30 devices into 'bots' to be used by actors for malicious purposes such as 
DDoS. Mirai operates by scanning the internet for a suite of devices with known default 
credentials, including DVRs, printers and home internet routers. It uses those credentials 
to install itself onto the device, and then scans the internet for new vulnerable devices to 
infect. Despite its relative simplicity, Mirai has been used to implement some of the largest 
DDoS incidents. 

On 20 September 2016, the Mirai botnet launched a DDoS attack against OVH, a major web 
hosting company based in France. A DDoS attack was also launched against the website of 
an independent IT security journalist, Brian Krebs, forcing his website offline despite it being 
protected by one of the leading DDoS protection Services, Akamai. Regardless of its relative 
simplicity, this attack by Mirai was considered one of the largest DDoS attacks ever seen. 

DDOS EXT0RTI0N 

DDoS extortion occurs when a specific cyber-actor threatens to launch DDoS activities 
against an organisation unless a fee is paid. DDoS extortion threats have been raised 
against small, médium and large businesses including financial institutions in Australia. 

The instances of DDoS extortion have increased, with threats coming from both domestic 
and international serious and organised criminal syndicates. 

BUSINESS EMAIL C0MPR0MISE 

Business email compromise (BEC) is a cybercrime scheme that targets large and small 
businesses for financial gain. BEC can take many forms but most commonly involves 
impersonating a high-level employee in order to change invoice details or request 
immediate funds transfers. BEC requires few technical skills; most effort is spent on social 
engineering and research on targets. 

BEC is starting to gain ground in Australia and—since the inception of ACORN in November 
2014—victim reports have increased. Due to its increasing prevalence, BEC is now being 
quantified in Australia for the first time. Analysis of ACORN data found 749 cases reported in 
the 2015-16 financial year, and 243 cases reported within the first quarter of the 2016-17 
financial year. 


30 The Internet of Things (loT) is made up of physical objects that have embedded network and computing elements, and 
communicate with other objects, or computers, over a network, usually the internet. 
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INVESTMENT AND FINANCIAL MARKET FRAUD 

Domestic and transnational serious and organised crime groups involved in investment and 
financial market fraud continué to target Australia. Online platforms and exploitation of 
markets are playing an increasingly ¡mportant role in investment and financial market fraud, 
which refers to three different types of fraud: 

■ fraudulent investment schemes, such as boiler-room fraud and Ponzi schemes 31 

■ manipulation or exploitation of the legitímate share market to artificially raise or lower 
the price of securities 

■ exploitation of financial market securities to commit fraud or to launder the proceeds of 
crime—for example, off-market share transfers and fraudulent share schemes. 

Boiler-room or cold-call investment fraud operations pose an enduring issue for law 
enforcement. In January 2017, a 51-year-old man was extradited from South Australia 
to face five counts of fraud in Queensland over his alleged involvement in múltiple Gold 
Coast-based investment compames offering shares in products that were ultimately 
flawed. Approximately A$6 million was taken from unsuspecting individuáis who had 
invested in predictive betting software that promised to provide high levels of financial 
returns accompanied by tax-free gains. Once delivered, the software failed to work and the 
organisers of the scheme refused to return the funds to ¡nvestors. 

The availability of Computer programs that create orders to buy and sell securities has 
provided further opportunities for serious and organised crime groups to engage in market 
manipulation. These Computer programs create artificial interest in a particular security by 
driving the price either up or down. Once this has occurred, securities that are held can be 
sold (at a higher price) or bought (at a lower price). Such activity is known as 'spoofing'. 


CASE STUDY: TRANSNATIONAL ELECTRONIC MARKET 
MANIPULATION 

In mid-2015, an online share-trading account was created by an individual believed to be 
based in Russia. This account was used to purchase Australian-market-listed securities. 

The individual was also able to gain access to a number of other legitímate share-trading 
accounts and raise funds through the sale of shares held within them. These funds were 
then used to purchase shares in the same companies as those held in the recently created 
share-trading account, thereby pushing up the price. Once the price had increased to a 
certain level, the individual sold the original shares, realising a profit. In this instance, the 
scheme was detected and authorities were able to stop the transfer of the profits offshore 


31 A Ponzi scheme is a fraudulent investment scam where a promoter promises ¡nvestors a return on investment, but this 
return is generated from new capital obtained from new ¡nvestors rather than profit earned from legitímate sources. 
Operators usually entice new ¡nvestors by offering higher returns than other ¡nvestments. The scheme often falls apart 
because the promoter starts to spend the money too quickly or the pool of ¡nvestors dries up. 
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LOCATE 

Telemarketer coid calis potential victims offering investment opportunities. 

ENGAGE 

Follow up contact from a sales consultant who uses an established 'script' 
to entice potential victims to enter into a contract with the company. 

CONVINCE 

Further sales techniques are employed to convince potential victims to 
invest, often including repeated calis and referrals to the company website 
that appears legitímate. 

TRANSACT 

The victim enters into a contract with the company and transfers funds- 
often between A$5,000-50,000. 

CONCEAL 

Invested funds are withdrawn/transferred to a sepárate bank account 
controlled by the parent syndicate. The victim's trading account may appear 
to be growing on the company website, but they are unable to access their 
investment funds. 

RE-ENGAGE 

The victim is re-contacted and offered upgraded investment package 
options to invest further funds. 

PHOENIX 

Company income decreases as the availability of potential victims is 
reduced-often a direct result of bad publicity. The parent syndicate folds 
the company and the scheme is re-launched under a new company ñame. 
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REVENUE AND TAXATION FRAUD 

Revenue and taxation fraud ¡nvolves the intentional abuse of the taxation system with the 
aim of obtaining financial benefit. It encompasses numerous non-compliant activities and 
can result ¡n criminal sanctions such as fines or imprisonment. Such activities range from 
failing to report income in order to avoid taxation obligations to the use of complex offshore 
secrecy arrangements, also to evade tax. The use of professional facilitators continúes to 
be a key enabler of revenue and taxation fraud, most notably in fraudulent phoenix activity, 
offshore tax evasión and the abusive use of trusts. 

The Australian Taxation Office (ATO) is the principal revenue collection agency of the 
Australian Government and is responsible for the administration of tax products, which 
ineludes administering both income tax and the goods and Services tax. In the last six 
months of 2016, the ATO reports tax crime investigations led to: 

■ 138 fraud charges 

■ lOjailterms 

■ the seizure of ¡Ilegal tobáceo plants and ¡Ilegal stills with a total potential excise valué of 
more than A$18.7 million 

■ the execution of six search warrants relating to fraudulent phoenix activity 

■ the Identification of attempted taxation fraud worth A$1.4 million 

■ the Identification of false taxation claims of over A$10.8 million. 

It is estimated that fraudulent phoenix activity costs the Australian economy A$3.2 billion 
each year. Fraudulent phoenix activity involves the delibérate liquidaron of a company 
in order to avoid paying creditors, taxes and employee entitlements. Once a company 
has been liquidated, the perpetrators transfer the remaining assets to a new entity and 
continué to opérate the same or a similar business under a new ñame, retaining the same 
ownership. The end results of phoenix activity are financial loss to suppliers due to unpaid 
debits; financial loss to employees through unpaid superannuation entitlements; and loss to 
the commumty due to unpaid taxation revenue. 

Professional facilitators are key enablers of offshore tax evasión, as a high level of expert 
knowledge is required to successfully establish and opérate large-scale fraud and tax 
evasión activities while avoiding detection. Australia-based facilitators have been seen 
to promote the Services of offshore financial Service providers. Facilitators inelude 
professionals in the import/export, accounting, legal, money remittance, finance, insurance 
and ICT industries. There is also evidence of superannuation and estáte planning structures 
and strategies being part of integrated tax evasión design by prívate wealth groups. 

Globalisation and technological advances have made it easier for individuáis to hold 
investments in offshore financial institutions, ¡ncreasing the opportunity for tax evasión. 

In April 2016, 11.5 million documents were leaked from the Panamanian law firm, Mossack 
Fonseca, exposing how secretive offshore tax regimes can be exploited to conceal wealth 
and evade tax. The leaked documents revealed the ñames of more than 1,000 Australians. 
Eighty of these ñames were matched with the ACIC's criminal intelligence holdings, and 
several were recorded on the National Criminal Target List. 
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The significance of the exploitation of offshore secrecy arrangements to evade tax is observed 
in recent advice provided by the ATO that, on the successful completion of Project Wickenby, 32 
over $2.2 billion ¡n tax liabilities had been raised and 46 criminal convictions secured. 

While the establishment of an offshore structure or trust is often for a genuine purpose, 
many structures and trusts are being used to evade tax, to avoid corporate responsibility, 
to disguise and hide unexplained wealth, to facilítate criminal activity, and to launder the 
proceeds of crime. It remains difficult to identify the level of involvement by serious and 
organised crime in the abusive use of trusts due to the ¡nherent complexity of the legislative 
and regulatory frameworks surrounding trusts and trust structures. Revenue and taxation 
fraud will remain a long-term issue for law enforcement as interactions between key 
enablers such as technology, identity crime and professional facilitators become increasingly 
complex and frequent. 

SUPERANNUATION FRAUD 

Australia's large pool of superannuation savings continúes to be an attractive target for 
organised crime groups. The complex nature of superannuation schemes offers a range of 
opportunities for fraud including the theft of contributions and fund assets, fraudulent fund 
investments, non-existent schemes, and excessive fees charged by advisers. 

The volume of funds held in superannuation schemes in Australia is significant: over 
14.8 million Australians held a super fund account as at 30 June 2016, and approximately 
43 per cent of those have more than one super account. 

There are various superannuation schemes available in Australia, including MySuper, retail 
funds, industry funds, public sector funds, corporate funds, rollover funds and self-managed 
super funds (SMSFs). The Australian Prudential Regulation Authority (APRA) supervises 
regulated superannuation funds (other than SMSFs), approved deposit funds, and pooled 
superannuation trusts—all of which are regulated under the Superannuation Industry 
(Supervisión) Act 1993. 

APRA is responsible for over A$2,198 billion in superannuation assets. APRA-regulated 
superannuation funds are susceptible to targeting by serious and organised crime groups: 
a recent increase has been observed in the use of targeted online methodologies to 
fraudulently access an individual's superannuation account. Superannuation funds are 
responding to this activity by developing data analytic capabilities designed to detect 
unusual or suspicious activity. 

SMSFs are particularly vulnerable to incidents of fraud, in part due to the desire of individuáis 
to source and control their own investments. At the end of the 2015-16 financial year, 
Australians held A$622 billion in SMSFs—a substantial and attractive pool of funds to 
serious and organised criminal groups. 

AUSTRAC plays an important role in combating superannuation fraud, and continúes to 
receive reports from industry on the use of fraudulent documentation in support of claims 
for early release of superannuation benefits or death and disability ¡nsurance payments. 


32 Project Wickenby, a cross-agency task forcé, was established in 2006 to protect the integrity of Australia's financial and 
regulatory Systems by preventing people from promoting or participating in the abuse of offshore secrecy arrangements. 
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Individuáis who have reached preservation age 33 are particularly vulnerable to theft or 
fraud, as funds can be transferred in and out of their account, much like a bank account. 
The ability to withdraw funds from a superannuation account provides an opportunity for 
serious and organised crime groups to access these funds if they can convince account 
holders to invest in a fraudulent scheme. 


CASE STUDY: PAYPAL PHISHING 

In early 2017, PayPal users were targeted by a phishing campaign directing victims to fake 
internet pages designed to look identical to legitímate websites in an effort to steal users' 
login credentials and other personal information. 

HACKERS' USE OF PERSONALLY IDENTIFIABLE INFORMATION (PII) TO FRAUDULENTLY 
AUTHORISE FUNDS TRANSFERS 



A victim's Computer 
is hacked to obtain 
PII, such as email 
address ortelephone 
number. 




t 


@ 

T 



O 

Stolen funds are 
used to finance 
T further criminal 
activities. 



The offender impersonates the 
victim and uses their PII to take 
over their account - for example 
initiating a password 
reset and/or eliciting 
a verification code. 



The offender gains control 
of the account. Funds are 
transferred from the victim's 
superannuation account into 
accounts controlled by the 
offender or criminal group. 



33 Access to superannuation benefits is generally restricted to members who have reached preservation age, which currently 
ranges from 55 to 60 years of age, depending on date of birth. 
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CARD FRAUD 

Card fraud ¡s the fraudulent acquisition and/or use of debit and credit cards, or card details, 
and may involve: 

■ fraudulent applications 

■ theft of cards/card details 

■ skimming of card details at automatic teller machines 

■ production of fake cards 

■ phishing/hacking to obtain card details. 

In the 2015-16 financial year, Australians spent A$703 billion on cards; A$521 million of this 
spending (across 2,665,806 transactions) was fraudulent. This represents a card fraud rate 
of 74.2 cents per A$1,000 spent, an increase from the previous 12 months (60.4 cents per 
A$1,000). 

The Australian Payments Network (APN) attributes 77 per cent of all fraud on Australian 
cards to card-not-present (CNP) fraud. CNP fraud occurs when card details are fraudulently 
used to make purchases or other payments without the card, via phone or Online shopping, 
betting and/or gaming platforms or other websites of a similar nature. 

The introduction of chip and PIN technology has resulted in a decline in card-present fraud; 
however, this kind of fraud also remains a problem. In response to these new technologies, 
organised crime groups have altered their methodologies—for example, by uploading 
skimmed data to blank cards to obtain cash or to purchase high-value goods in other 
countries. In the 2015-16 financial year, card counterfeit and skimming fraud perpetrated in 
Australia and overseas on Australian-issued cards accounted for almost A$47 million. 

The intersection between smartphone technology and mobile payment platforms has 
enabled contactless payments using smart devices containing linked credit card details. 

The rise in mobile payment Services follows the increasing use by Australians of 
smartphones to make online payments and purchases and to access banking Services. 
Vulnerabilities exist within these payment platforms that can be exploited by serious and 
organised crime groups via the use of malware. As Australia moves towards a cashless 
society, there are ¡ncreased opportunities for online payment and card fraud. 
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SPECIFIC CRIME MARKETS 

THEME SUMMARY 

Specific crime markets inelude visa and migration fraud, environmental crime and 
intellectual property crime. 

Visa and migration fraud presents a continued threat to the Australian community as well as 
to national security interests. Serious and organised crime groups exploit the Australian visa 
and migration system, engaging the Services of professional facilitators to enable entry into 
Australia. Visa and migration fraud ¡s highly profitable and closely linked to both identity 
crime and cybercrime. 

Environmental crime is diverse in nature and encompasses several crime markets. 
Transnational organised crime syndicates and opportunistic individuáis exploit these 
markets, which are characterised by high profit margins and low detection rates. The 
cost of environmental crime in the global context continúes to rise, with far-reaching 
environmental, financial, security and social implications. Technological developments in 
encrypted communication and the availability of ¡Ilegal online marketplaces continué to 
enable transnational environmental crime. 

Piracy and counterfeiting are serious international issues, and many countries including 
Australia commit significant resources to combating them. The main forms of intellectual 
property crime in Australia are the importaron of counterfeit goods such as clothing and 
the domestic manufacture of goods that infringe copyright. 

VISA AND MIGRATION FRAUD 

Exploitation of Australia's visa and migration program presents an ongoing threat to 
Australia's border. Manipularon of Australia's visa and migration system may occur through 
a range of fraudulent, exploitative or non-compliant activities. These include: 

■ visa application fraud 

■ travel document fraud, including identity fraud 

■ visa non-compliance 

■ labour exploitation. 

Visa and migration fraud occurs when a visa is issued on false or fraudulent grounds (visa 
application fraud), or when an ¡Ilegitímate or ¡Ilegal visa or passport is acquired (travel 
document fraud). Travel document fraud can also involve the fraudulent use of legitímate 
documents to obtain a visa or for travel. If false or fraudulent documents are used in an 
attempt to conceal the true identity of persons entering or leaving Australia, there is a 
potential impact on Australia's national security. A prominent feature in visa and migration 
fraud is the increasing involvement of serious and organised crime groups, who seek to exploit 
the Australian visa and migration system in order to facilítate criminal activities onshore. 
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Permanent visa fraud may occur through contrived marriages. Strategies to mitígate 
fraudulent partner sponsorship arrangements inelude a data-matching program between 
the Department of Human Services and the Department of Immigration and Border 
Protection (DIBP) to detect fake marriages, and legislative changes under the 'paying for 
visa sponsorship' framework. 34 


CASE STUDY: VISA FRAUD INVOLVING CONTRIVED 
MARRIAGE SCAM 

A registered migration agent and his wife, a marriage celebrant, were convicted in early 
2017 for organising a visa scam ¡nvolving 16 fake marriages between Australian women 
and Indian men. One witness testified to paying between A$35,000-$40,000 in fees to 
the migration agent and to the Australian woman he married in the scam. Both offenders 
received custodial sentences. 


Visa non-compliance typically involves a breach of visa conditions, commonly for financial 
gain or to remam in Australia; ¡t may also enable other migration threats, including labour 
exploitation. 

Visa manipulation ¡s a common feature of organised crime groups and businesses involved 
in the exploitation of labour. Visa holders may find they are exploited by such groups who 
employ them outside of their visa conditions with the threat of their visas being cancelled 
should these breaches be reported to the authorities. In June 2016, an Australian company 
was penalised for forcing four overseas workers, who were employed under the temporary 
skilled visa program, to return a portion of their fortnightly wages in cash and to work 
overtime without pay, while being threatened with dismissal and deportation. Taskforce 
Cadena was established by the Australian Government in June 2015 to target and disrupt 
crimináis organising visa fraud, ¡Ilegal work and the exploitation of foreign workers. It ¡s a 
joint ageney initiative between the DIBP—led by its operational arm, the ABF—and the Fair 
Work Ombudsman. 

Significant Investor and Premium Investor visa programs present opportunities for 
transnational organised crime groups to launder illicit wealth. The complexity of establishing 
and verifying the source of funds received from offshore applicants means that a Significant 
Investor or Premium Investor visa may be used as a means to legitimise wealth and achieve 
permanent resideney in Australia. 

Serious and organised crime groups as well as individual actors continué to exploit 
vulnerabilities within the migration system to obtain entry to Australia. Migration agents 
may be wittingly or unwittingly utilised as professional facilitators of this activity. 

Visa and migration fraud ¡s intrinsically linked to identity crime and cybercrime, and is likely 
to ¡ncrease in sophistication with advances in technology. 


34 Civil and criminal penalties can be imposed for offering, providing or receiving a benefit in return for visa sponsorship. 
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PEOPLE SMUGGLING 

People smuggling ¡s a global issue exploiting the most vulnerable of people. It can have wide 
ranglng effects includlng the loss of human life, human rights abuses, threats to securlty and 
corruptlon. The ¡nvolvement of transnatlonal organised crime groups in people smuggling 
continúes to grow in response to the ongoing demand for these Services. Transnational 
organised crime groups generate significant profits facilitating the ¡Ilegal movement of 
people. They may also use their people smuggling networks more broadly to support other 
criminal activities, including illicit drug and weapons trafficking as well as terrorism. 

People-smuggling investigations impacting Australia involve collaboration with international 
partners to disrupt domestic and international organisers, facilitators and financiers. 
Historically, the most visible form of people smuggling to Australia occurred via the maritime 
stream. Operation Sovereign Borders has significantly disrupted maritime people-smuggling 
ventures to Australia. 


ENVIRONMENTAL CRIME 

Environmental crime encompasses a diverse range of crime types including: 

■ ¡Ilegal trade in protected flora and fauna 

■ ¡Ilegal harvesting and trade of timber and forestry products 

■ pollution caused by dumping hazardous waste 

■ ¡Ilegal trade in ozone-depleting substances 

■ ¡Ilegal, unreported and unregulated fishing (IUU). 

Environmental crime can be complex and difficult to measure, with the cost increasing 
on a global scale. A 2016 joint Interpol and United Nations Environment Program report 35 
estimated the global annual cost of environmental crime at US$91-258 billion, an increase 
of 26 per cent since 2014. Assessed as the world's fourth-largest crime sector in terms of 
profit generation, environmental crime has far-reaching implications including the cost 
to future generations through the loss of natural resources and ecosystems, the loss of 
government revenue, the undermining of legitímate businesses, and threats to security 
in vulnerable regions. Criminal ¡nvolvement ranges from opportunistic individuáis and 
personal collectors of protected flora and fauna to sophisticated organised crime groups 
seeking to capitalise on the high profits and low detection rates. 

Environmental crime in Australia is seen principally in the trade of ¡Ilegal wildlife and in 
incidents of IUU fishing. Native vegetation clearance and water theft have previously 
been recognised as additional environment crime types unique to Australia. Serious 
organised crime ¡nvolvement in environmental crime in Australia is currently unknown, with 
individuáis and smaller networks more commonly reported. Technological developments 
including encrypted Communications, online marketplaces and use of bitcoin currency 
continué to enable crime in this sector. 

35 Nellemann, C; Henriksen, R; Kreilhuber, A; Stewart, D; Kotsovou, M; Raxter, P; Mrema, E; and Barrat, 

S. (Eds) 2016 The Rise of Environmental Crime-A Growing Threat to Natural Resources, Peace, 
Development and Security, United Nations Environment Programme and RHIPTO Rapid Response - 
Norwegian Center for Global Analyses, p.7. 
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The ¡Ilegal trade of wildlife and CITES 36 products ¡s highly profitable, estimated to cost 
US$7-23 billion per year globally. It ¡s also linked to the decline of many endangered 
species. A domestic and transnational market currently exists within Australia, although 
available data on seizures is limited. The trade is bi-directional: Australian native species 
are in demand overseas, and there is a market for exotic species in Australia. Interest in this 
market from serious and organised crime groups is likely to grow, given the high profitability 
and ¡ncreased opportunities to trade globally through encrypted Communications and via 
the darknet. 


CASE STUDY: AUSTRALIAN MAN ARRESTED FOR ILLEGAL 
WILDLIFE TRAFFICKING 

In March 2017, a joint operation between the AFP and the Department of Environment and 
Energy resulted in the arrest of a Sydney man who was charged with 41 offences relating to 
¡Ilegal wildlife trafficking. Investigators seized six packages destined for Sweden containing 
more than 40 native Australian lizards. The offender also allegedly imported 16 packages 
from Thailand containing over 200 animáis. 

Illegal, unreported and unregulated fishing is sometimes linked to other transnational 
organised crimes including drug trafficking, human trafficking and migrant smuggling. 
Incidents of IUU fishing in Australia target high-value species. Regular surveillance 
patrols and monitoring of Australian waters led to a significant decrease in IUU fishing 
apprehensions over the last decade, with 17 apprehensions in 2015-16. 


CASE STUDY: SIX T0NNES 0F SEA CUCUMBER SEIZED 

In June 2016, two Vietnamese fishing vessels were apprehended approximately 600 kilometres 
north-east of Cairns, Queensland within the Coral Sea Commonwealth Marine Reserve. 
Approximately six tonnes of sea cucumber were located on the vessels and the 30 crew 
members pleaded guilty and were convicted for breaking Australian fisheries and environmental 
laws. Penalties included suspended jail sentences ranging from two months for the crew 
members to five and seven months for the masters of the vessels. The two fishing vessels 
operated by the convicted illegal fishermen were confiscated by the Australian Fisheries 
Management Authority and destroyed in Cairns. 

Significant increases in the global cost of environmental crime were identified within the 
illegal harvesting and trade of timber sector. The majority of this crime type is trade-related, 
characterised by practices such as under-reporting of export volumes, tax evasión, bribery, 
and altering of species ñames to co-mingle legal and illegal commodities. 


36 Convention on International Trade in Endangered Species of Wild Fauna and Flora. 
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Australia is primarily a destinaron country for ¡Ilegal timber, with previous estimates 
suggesting up to 10 per cent of ¡mported products contain ¡Ilegal timber. Reporting indicates 
small-scale ¡Ilegal logging was occurring within the Australian sandalwood trade. The 
Australian Government continúes to establish guidelines with source countries 37 to ensure 
businesses apply due diligence in relation to timber importations through compliance 
assessments. 

Australia is currently an exporter of hazardous waste, in particular e-waste. Illegal domestic 
dumping of e-waste is an ongoing problem. The extent of organised crime ¡nvolvement 
in this market is unknown, but there have been reported incidents of organised crime 
¡nvolvement in illegal dumping of hazardous building materials and other waste. 

The global trade in illicit ozone-depleting substances (ODS) has been reduced by the 
successful Montreal Protocol on Substances that Deplete the Ozone Layer. Internationally, 
the illegal trade in hydrochlorofluorocarbons continúes to develop. It is unclear if a market 
in ODS exists in Australia. 

Environmental crime is a diverse and expanding crime market that is both profitable and 
transnational in nature. The impacts of environmental crime can be long-lasting, and in 
some instances irreversible. 


INTELLECTUAL PROPERTY CRIME 

Intellectual property (IP) crime including piracy, counterfeiting and theft of IP continúes 
to be a significant issue within Australia and overseas. Data published in 2016 by the 
Organisation for Economic Co-operation and Development (OECD) and the European 
Union's Intellectual Property Office estimated the global valué of counterfeit goods in 2013 
to be US$461 billion, with China listed as the top producer of counterfeit goods. In October 
2016, counterfeit skincare goods to the valué of A$150,000 marked with the 'Australian 
Made' logo were intercepted by the DIBP on a shipment from China. 

Instances of cyber-enabled IP crime continué to be detected. For example, in the 10-month 
period to March 2016, online brand protection and domain ñame management specialists 
NetNames removed 2,163,694 counterfeit Billabong Group brand Ítems from online channels. 


CASE STUDY: DIRECTIMPACT 0F IP THEFT 0N AN 
AUSTRALIAN BUSINESS 

Adelaide-based Communications, metal-detection and mining technology firm Codan was 
subjected to IP theft after Chínese hackers stole designs for metal detection units in 2012. 
The impact of this breach led to the company's net profit falling from A$45 million in the 
2012-13 financial year to A$9.2 million in the 2013-14 financial year. 


37 Australia had country-specific guidelines with Cañada, Finland, Indonesia, Italy, Malaysia, New Zealand, Solomon Islands, 
and Papua New Guinea as of March 2016. 
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CRIMES AGAINST THE PERSON 

THEME SUMMARY 

Crimes against the person ¡nclude the sexual exploitation of children, human trafficking 
and slavery. Measuring the extent and financia! cost of such crimes is difficult, and this 
is compounded by under-reporting. In 2013-14, the then Australian Crime Commission 
conservatively estimated the cost at A$89 million. However, this figure does not factor in 
the social, health and welfare costs for victims and their families, and represents a partial 
estímate at best. Severe and long-term psychological, physical and behavioural harms have 
been reported in victims. Investigations are often made more complex by offences occurring 
in múltiple jurisdictions, domestically and overseas. 

The Online sexual exploitation of children is a global crime market that is evolving rapidly 
alongside technological advances. Sophisticated criminal groups and individual offenders 
increasingly exploit anonymous networks and encryption tools to engage in child sex 
offences. Offenders are often early adopters of new technologies, and the uptake of mobile 
and data technology by younger people enables unprecedented online access to children. 

Human trafficking and slavery is a global concern, and the mass movement of refugees 
and migrants in the last two years has escalated the threat. While under-reporting is 
endemic within this crime type, increased outreach and awareness programs funded by the 
Australian Government have likely contributed to a growth in referrals to law enforcement 
for these offences. 


SEXUAL EXPLOITATION OF CHILDREN 

The number of reports to Australian law enforcement relating to child sexual exploitation 
(CSE) and the availability of child exploitation material (CEM) has increased. These crimes are 
enabled by technological advancements in mobile phones that provide increased numbers 
of platforms to access CEM, by an overall increased availability of online CEM, and by greater 
access to encryption and anonymity tools to disguise online activities. The uptake of social 
media platforms and online game forums, combined with a growth in access to broadband 
internet and mobile phones, provides unprecedented access to children online. Australia's 
Office of the Children's eSafety Commissioner reportedly conducted 7,400 investigations into 
online child sexual abuse content in 2016, with the vast majority of content displaying images 
of children of primary school age or younger. The rapid evolution of social media and gaming 
platforms poses challenges in monitoring online safety of children. 

The infiltration of legitímate websites by offenders for child grooming, for child sex extortion 
('sextortion') and for the dissemination of CEM is an increasing trend. Child sextortion— 
where children are deceived or coerced into providing sexually comprising imagery, and 
then extorted to provide more explicit images or money—is likely under-reported due to 
the victim's fear and shame. Sextortion may also be related to grooming children for the 
purposes of committing a contact offence. 
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CASE STUDY: OFFENDER ARRESTED FOR CEM AND CSE 
OFFENCES 

A South Australian child protection officer was convicted and sentenced to 35 years 
imprisonment ¡n August 2015 for sexually abusing seven children in his care. The children 
were predominantly aged between 18 months and three years. The offender was 
also identified as the head administrator of a sophisticated global CEM network with 
approximately 1,000 members. 


Child exploitation investigations frequently traverse physical borders. Australian offenders 
are commonly involved as Online members, customers, administrators and/or organisers 
of Online global networks featuring CEM. Collaboration between Europol and the AFP 
using victim identification techniques recently led to the arrest of an Australian man, who 
had abused two young relatives and his twin baby girls, who were born through surrogacy 
arrangements. The man subsequently pleaded guilty to 38 charges, including trafficking 
children, incest, and producing, accessing or transmitting child abuse material and was 
sentenced to 22 years in prison. 

Online CEM ¡s frequently exchanged through peer-to-peer networks. Forums and networks 
on the darknet that facilítate CEM exchange are growing in number as users become 
more technologically proficient. Membership to CEM sites can reportedly require regular 
production and uploading of new CEM, effectively increasing the volume of material 
available. Methodologies to evade and hinder law enforcement attention are shared by 
offenders within these forums. Tools such as internet protocol anonymisation, device 
and communication encryption, cloud storage, and wiping software are often employed 
by offenders to avoid detection. The involvement of the darknet in the production and 
distribution of CEM will continué to grow. Disruption of the top-tier members of online CEM 
sites actively ¡nvolved in the production, supply and distribution of new CEM on the darknet 
is an ongoing focus for law enforcement. 

Uve online streaming of child sexual abuse to paying customers through video-sharing 
platforms is an emerging issue that is targeting regions with widespread poverty, limited 
child protection measures and increased access to the internet. The South-East Asia región 
is known to be targeted by travelling Australian child sex offenders. Offending can comprise 
either short-stay opportunistic events or long-term embedded offending, and/or online 
child exploitation. AFP notifications to foreign jurisdictions of pending travel by known 
Australian child sex offenders 38 aim to reduce offending. Border restrictions for registered 
child sex offenders, such as passport cancellations and international denial of entry, could 
potentially lead to an increase in live online streaming of abuse. The sexual exploitation 
of children will continué to be an issue, and the online environment continúes to present 
challenges in detection as technological advancements in anonymisation and encryption 
tools are increasingly utilised by offenders. 


38 Recorded ¡n the Australian National Child Sex Offender System. 
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HUMAN TRAFFICKING AND SLAVERY 

Human trafficking and slavery offences inelude the movement of persons, either domestically 
or internationally, for the purposes of exploitation and the subjection of persons to exploitative 
practices including servitude, forced labour and forced marriage. 

Human trafficking differs from people smuggling, where people are moved across borders in 
an organised but irregular manner using a fee-for-service arrangement that does not involve 
ongoing exploitation. 

On an international scale, the exploitation of vulnerable people by human traffickers has 
significantly escalated in the last two years, due to the mass movement of refugees and 
migrants as part of the global refugee crisis. When compared to global trends, incidents of 
human trafficking and slavery in Australia remam uncommon. This is likely explained by a 
range of factors including strong migration Controls, workforce regulations, law enforcement 
and compliance programs as well as Australia's geographical isolation. Australian Government 
initiatives including the National Action Plan to Combat Human Trafficking and Slavery 2015-19 
have also played a key role. 

The extent of human trafficking and slavery is difficult to quantify and is likely to be 
under-reported. Successful prosecutions are limited, due both to the complexity of such 
investigations and the reluctance of victims to speak out. Victims of sexual exploitation have 
historically dominated referrals for investigation in Australia. Referrals of forced marriage 
and labour exploitation in the construction, hospitality and domestic Service industries have 
increased and now outnumber referrals relating to sexual exploitation. The AFP received 169 
human trafficking referrals in 2015-16, 130 of which related to forms of exploitation outside of 
the sex industry. 

The increase in the number of referrals to the AFP for human trafficking and slavery offences 
may be, in part, a result of recent legislative amendments. In February 2013, the Australian 
Parliament passed the Crimes Legislation Amendment (Slavery, Slavery-llke Conditions and 
People Trafficking) Act 2013, which made forced marriage a crime punishable by a jail sentence 
of four to seven years. Since this legislation was passed, the number of referrals to the AFP for 
investigations into forced marriage and to the Australian Government's Support for Trafficked 
People Program has risen. Legislative changes introduced in 2015 have further increased 
the penalties for forced marriage. Additional funding to non-government organisations to 
administer outreach and awareness-raising programs has also likely contributed to a greater 
number of referrals. Within the context of forced marriage, Australia's human trafficking profile 
may change to both a destination and source country. In those few instances identified by 
the Australian Government where young girls from Australia are taken overseas to marry, the 
primary offenders are often family members. 

Small opportunistic crime groups are more likely to be involved in human trafficking and slavery 
offences in Australia than large organised crime groups, and typically use overseas family and 
business contacts to recruit and facilítate the movement of people. Victims often share similar 
cultural, language, employment and socio-economic backgrounds with offenders. 

The visa framework for human trafficking and slavery victims was amended in 2015. 

The reforms included changes to visa titles to minimise stigmatisation of victims and ¡ncrease 
their access to government support and benefits. 

While human trafficking and exploitation of vulnerable people in Australia is uncommon, 
the impact on the individual is significant. The Australian Government remains committed to 
preventing human trafficking and slavery through the detection and prosecution of offenders, 
and to providing support for trafficked people. 
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